The page shows warning message about ad-blocker at thebrag.com with ETP set to STRICT
Categories
(Core :: Privacy: Anti-Tracking, defect, P3)
Tracking
()
People
(Reporter: rbucata, Unassigned)
References
(Blocks 2 open bugs, )
Details
Attachments
(1 file)
|
85.21 KB,
image/jpeg
|
Details |
Screenshot_11.jpg
Environment:
Operating System: iOS 13.1.3
Firefox version: : Firefox Daylight 33.0 (4119)
Preconditions:
ETP set to STRICT
Clean profile
Steps to reproduce:
- Navigate to: https://thebrag.com/sydney-solstice-set-to-fill-the-vivid-void-this-winter/
- Observe the page
Expected Behavior:
The page should not display any warning messages
Actual Behavior:
A warning message is displayed
Notes:
- Not reproducible with ETP set to STANDARD.
- Not reproducible at the second access of the page with the same profile in Firefox
|
||
Comment 1•3 years ago
•
|
||
Looking through their blockerDetected and related script functions, they're doing a number of checks, but the one failing here is doing a check using a Google SafeFrame. That is, they load this URL in an iframe: https://tpc.googlesyndication.com/safeframe/1-0-23/html/container.html
They then set the iframe's window.name to this string:
1-0-23;70;<script>window.parent && window.parent.postMessage(\"513\",\"*\")</script>{}
And then they wait for that frame to load and send a message back.
The relevant code in the iframe boils down to this:
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<title>SafeFrame Container</title>
<script>
try {
const F = /^([^;]+);(\d+);([\s\S]*)$/.exec(window.name);
window.name = "";
const P = window.document;
P.open("text/html", "replace");
P.write(F[3].substr(0, +F[2]));
P.close();
} catch {}
</script>
</head>
<body></body>
</html>
So we should be able to shim https://tpc.googlesyndication.com/safeframe/*/html/container.html accordingly. I'll try this ASAP.
|
|
||
Updated•3 years ago
|
|
|
||
Updated•3 years ago
|
|
||
Comment 2•3 years ago
|
||
This issue reproduces on the Firefox Nightly from 8.2 with GV 92.0a1 with Google Pixel (Android 10).
The ETP is set to Strict. It reproduces on both, normal and private browsing.
|
||
Comment 3•3 years ago
|
||
Reproduced this on Nightly 89.0a1 (20210329214331) on Ubuntu 20.04.
This issue is no longer reproducible on the latest Nightly 93.0a1 nor on the latest Firefox 92 beta 1 - the adblocker warning is not displayed. Tested with strict mode on and in private browsing on macOS Big Sur 11.5.1, Ubuntu 20.04 x64, and Windows 10 x 64.
|
||
Comment 4•3 years ago
|
||
The issue is no longer reproducible on 92.0.0-beta.2 with Google Pixel 3 (Android 12), tested with ETP Strict.
|
|
||
Comment 5•3 years ago
|
||
I was not able to reproduce this issue anymore on the 8/23 Nightly build with GV 93.0a1, on Lenovo Tab M10 (Android 10).
|
Reporter | |
Comment 6•3 years ago
|
||
The issue is still reproducible on iOS devices
Tested with:
Browser/Version: Firefox Daylight 36.0 (5732)
Operating System: iOS 14.6
|
||
Updated•3 years ago
|
|
|
||
Updated•3 years ago
|
|
|
||
Comment 7•2 years ago
|
||
This should no longer be an issue except on iOS, as SmartBlock isn't available there.
|
||
Comment 8•2 years ago
|
||
I can still reproduce this on Android with ETP - Strict enabled.
https://prnt.sc/r3YI93LO5Fpx
Tested with:
Browser / Version: Firefox Nightly 104.0a1 (🦎 104.0a1-20220713093828)
Operating System: Google Pixel 5 (Android 12) - 1080 x 2340 pixels, 19.5:9 ratio (~432 ppi density), Samsung Galaxy S8 (Android 9) - 1440 x 2960 pixels, 18.5:9 ratio (~570 ppi density)
|
|
||
Comment 9•2 years ago
|
||
Yes, it appears that they are now also testing for another tracking pixel to detect "ad blockers". I'll just go ahead and expand the list based on checking the various URLs listed at Tracker Radar for adsafeprotected.
|
|
||
Comment 10•2 years ago
|
||
They also seem to similarly use advertising.com.
|
|
||
Comment 11•2 years ago
|
||
This was fixed in the Firefox 104 webcompat update in bug 1776673.
|
|
Reporter | |
Comment 12•2 years ago
|
||
I can confirm that the issue is no longer reproducible on iOS devices and Android devices.
Tested with:
Browser / Version: Firefox Nightly 105.0a1 (2015898795-🦎105.0a1-20220817091029🦎)
Operating System: Samsung A51 (Android 11) -1080 × 2400 pixels 20:9 aspect ratio (~405 ppi density)
Operating System: Google Pixel 3 (Android 12) -1080 x 2160 pixels, 18:9 ratio (~443 ppi density)
Tested with:
Browser/Version: Firefox Daylight 103.1 (15076)
Operating System: iOS 15.5
Description
•